Linux Kernel NULL Pointer Dereference Vulnerability in Energy Management Netlink Handler

A NULL pointer dereference vulnerability has been identified in the Linux kernel's energy management netlink handling. The issue arises in the 'dev_energymodel_nl_get_perf_domains_doit()' function, which calls 'em_perf_domain_get_by_id()' without verifying the return value. When a non-existent performance domain ID is supplied, 'em_perf_domain_get_by_id()' returns NULL. The subsequent call to '__em_nl_get_pd_size()' dereferences a NULL pointer, leading to a crash. This vulnerability affects Linux kernel versions 6.19 and later.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, leading to a kernel crash.